$ rpki-client -vvf rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft File: VwO1XNjigCKWBKELyM9bOAERY_o.mft (raw, json) Hash identifier: deT+g7ySzCF3eeG3uvE5kfkW9aAMkEu8N/E8tIdnSWU= Subject key identifier: E3:65:9B:EA:C6:A6:5A:71:12:6C:11:65:3B:84:BB:18:5A:D1:D8:41 Authority key identifier: 57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA Certificate issuer: /CN=A9183EB3/serialNumber=5703B55CD8E280229604A10BC8CF5B38011163FA Certificate serial: 0AAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft Manifest number: 0AA8 Signing time: Sat 18 Oct 2025 20:27:39 +0000 Manifest this update: Sat 18 Oct 2025 20:27:38 +0000 Manifest next update: Sat 25 Oct 2025 20:27:38 +0000 Files and hashes: 1: VwO1XNjigCKWBKELyM9bOAERY_o.crl (hash: eddEQvIdibMV+9DhfNNyl5spEvM+mZWdUrgs6r2X+cA=) 2: D67C31E8637511EA8A698E0BC4F9AE02.roa (hash: 0G9HtTLZBqQUwE8UGiq72iqUjTtI4Gz6+fEdMQN9vkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2735 (0xaaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183EB3, serialNumber=5703B55CD8E280229604A10BC8CF5B38011163FA Validity Not Before: Oct 18 20:27:38 2025 GMT Not After : Oct 25 20:27:38 2025 GMT Subject: CN=68f3f83b-a09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:79:28:d0:d8:8d:74:c8:8a:2c:c1:65:6a:f8: 2a:59:fa:e1:ec:32:47:03:24:86:07:48:27:7b:93: cc:70:f9:81:8e:69:ba:d9:cb:79:af:95:16:9e:dc: 7e:97:7a:aa:9e:6b:c7:fc:3f:b9:8a:2b:a7:27:ea: 4a:19:1e:59:82:81:55:07:ea:44:fa:82:b0:66:07: 5a:bb:40:45:c0:21:64:96:de:5d:91:ee:5a:2c:e2: d4:27:63:85:0e:16:6d:c9:93:34:58:99:0c:9a:ee: 1c:f9:7e:6d:ea:6b:a2:bb:64:d5:eb:c2:f7:58:29: ca:21:8e:cc:52:b3:f8:4f:4d:a5:82:77:4a:2c:e5: c2:f1:24:ba:0d:fc:21:a7:01:91:02:15:23:60:f1: b9:28:ae:20:20:c3:8a:c3:1b:ff:0b:31:05:56:a6: 6e:5a:79:71:92:8f:ff:d6:24:10:4f:22:b0:0e:0a: 3c:0f:d5:58:00:a6:e3:04:2d:9c:e6:88:cb:5f:68: dc:19:89:03:5c:3b:18:ff:c2:4f:29:62:8c:cf:83: 92:f9:ed:d5:eb:d0:28:3c:eb:c9:fd:ac:ab:bc:bb: 1a:d8:af:36:c5:2e:df:76:97:d7:77:da:75:ed:92: 92:a8:92:73:82:a1:34:d8:a7:88:b4:2b:e7:c3:c0: d5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:65:9B:EA:C6:A6:5A:71:12:6C:11:65:3B:84:BB:18:5A:D1:D8:41 X509v3 Authority Key Identifier: keyid:57:03:B5:5C:D8:E2:80:22:96:04:A1:0B:C8:CF:5B:38:01:11:63:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VwO1XNjigCKWBKELyM9bOAERY_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183EB3/3DB6A362637511EAB9C3680BC4F9AE02/VwO1XNjigCKWBKELyM9bOAERY_o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4d:8d:69:55:18:46:d6:2e:43:e7:a9:e5:75:48:e6:65:85: 44:35:07:0f:c1:79:b7:0c:ed:3c:a9:b3:c9:6d:ca:94:f2:0c: 9b:82:ff:c8:bf:ba:94:40:8d:4a:28:eb:8f:d7:86:26:f8:db: b3:ce:32:1f:90:d7:7e:93:6e:82:16:80:95:31:c8:34:9d:fd: 5b:ad:85:0c:21:be:53:0e:f1:fb:f4:df:98:e5:f5:80:21:b3: 08:d4:bd:27:c5:bc:fb:39:26:82:60:8f:da:c9:9e:15:b4:af: ef:6d:66:b5:19:ee:99:54:8d:e2:35:78:d7:a3:fa:6e:07:f2: 29:f2:17:a6:7c:ed:63:60:55:07:39:af:a7:83:1d:96:71:4e: 83:48:d7:87:55:b8:85:6b:d4:aa:e3:c7:b9:24:73:a1:88:9c: f1:8c:bb:4d:d2:bf:07:cc:b5:ab:c4:4c:50:70:be:cf:c2:f3: 07:24:54:77:38:bc:d8:44:d7:29:fd:a8:44:70:70:91:db:6b: a7:c6:a5:90:32:aa:ad:4a:8c:3d:7e:5e:a1:30:79:f9:cb:c6: 39:10:48:59:e8:4b:15:27:4d:e9:f2:ad:d8:35:fd:f5:d2:a1: e9:1c:3a:b2:8c:b4:82:85:17:bd:b0:2f:1a:36:2c:96:70:49: 42:4d:a6:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNFQjMxMTAvBgNVBAUTKDU3MDNCNTVDRDhFMjgwMjI5NjA0QTEwQkM4Q0Y1QjM4 MDExMTYzRkEwHhcNMjUxMDE4MjAyNzM4WhcNMjUxMDI1MjAyNzM4WjAYMRYwFAYD VQQDEw02OGYzZjgzYi1hMDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmXko0NiNdMiKLMFlavgqWfrh7DJHAySGB0gne5PMcPmBjmm62ct5r5UWntx+ l3qqnmvH/D+5iiunJ+pKGR5ZgoFVB+pE+oKwZgdau0BFwCFklt5dke5aLOLUJ2OF DhZtyZM0WJkMmu4c+X5t6muiu2TV68L3WCnKIY7MUrP4T02lgndKLOXC8SS6Dfwh pwGRAhUjYPG5KK4gIMOKwxv/CzEFVqZuWnlxko//1iQQTyKwDgo8D9VYAKbjBC2c 5ojLX2jcGYkDXDsY/8JPKWKMz4OS+e3V69AoPOvJ/ayrvLsa2K82xS7fdpfXd9p1 7ZKSqJJzgqE02KeItCvnw8DVPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONlm+rG plpxEmwRZTuEuxha0dhBMB8GA1UdIwQYMBaAFFcDtVzY4oAilgShC8jPWzgBEWP6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0VCMy8zREI2QTM2MjYz NzUxMUVBQjlDMzY4MEJDNEY5QUUwMi9Wd08xWE5qaWdDS1dCS0VMeU05Yk9BRVJZ X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z3TzFYTmppZ0NLV0JLRUx5TTliT0FFUllfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0VCMy8zREI2QTM2MjYzNzUxMUVBQjlDMzY4MEJDNEY5QUUwMi9Wd08xWE5qaWdD S1dCS0VMeU05Yk9BRVJZX28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8TY1pVRhG1i5D56nldUjmZYVENQcPwXm3DO08qbPJbcqU8gybgv/I v7qUQI1KKOuP14Ym+NuzzjIfkNd+k26CFoCVMcg0nf1brYUMIb5TDvH79N+Y5fWA IbMI1L0nxbz7OSaCYI/ayZ4VtK/vbWa1Ge6ZVI3iNXjXo/puB/Ip8hemfO1jYFUH Oa+ngx2WcU6DSNeHVbiFa9Sq48e5JHOhiJzxjLtN0r8HzLWrxExQcL7PwvMHJFR3 OLzYRNcp/ahEcHCR22unxqWQMqqtSow9fl6hMHn5y8Y5EEhZ6EsVJ03p8q3YNf31 0qHpHDqyjLSChRe9sC8aNiyWcElCTaav -----END CERTIFICATE-----Generated at Mon Oct 20 15:01:09 2025 by rpki-client